0ct0pu5/moby
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
7060 commits 14 branches 412 tags 338 MiB
Commit graph

295 commits

Author SHA1 Message Date
Dan Walsh
4c43566925 This patch adds SELinux labeling support. 
docker will run the process(es) within the container with an SELinux label and will label
all of  the content within the container with mount label.  Any temporary file systems
created within the container need to be mounted with the same mount label.

The user can override the process label by specifying

-Z With a string of space separated options.

-Z "user=unconfined_u role=unconfined_r type=unconfined_t level=s0"

Would cause the process label to run with unconfined_u:unconfined_r:unconfined_t:s0"

By default the processes will run execute within the container as svirt_lxc_net_t.
All of the content in the container as svirt_sandbox_file_t.

The process mcs level is based of the PID of the docker process that is creating the container.

If you run the container in --priv mode, the labeling will be disabled.

Docker-DCO-1.1-Signed-off-by: Dan Walsh <dwalsh@redhat.com> (github: rhatdan)
 2014-03-26 15:30:40 -04:00
Paul Annesley
576278102e install.sh (get.docker.io) aufs comment updated. 
devicemapper has landed, but the TODO hasn't been actioned presumably
because aufs is still preferred over devicemapper when available[1].

Comment updated accordingly.

Citation [1]: 267ca39921/runtime/graphdriver/driver.go (L40-L46)

Docker-DCO-1.1-Signed-off-by: Paul Annesley <paul@annesley.cc> (github: pda)
 2014-03-25 11:33:16 -07:00
Michael Crosby
f41135bc11 As far as I know this code is not used or maintained 
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
 2014-03-24 12:39:56 +00:00
Tianon Gravi
6b46a09186 Fix a lot of the sha256 and md5 stuff to be more DRY and extendible, and on more things (specifically, the tgz files too) 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-19 22:25:09 -06:00
Tianon Gravi
372b7282cb Merge pull request #4788 from SvenDowideit/sign-releases-fixup 
Fix bugs in release.sh
 2014-03-19 18:19:25 -06:00
Sven Dowideit
62eb23aed5 missed a bug 
Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@fosiki.com> (github: SvenDowideit)
 2014-03-20 10:18:08 +10:00
Tianon Gravi
43124b5613 Merge pull request #4708 from SvenDowideit/sign-releases 
Add md5 and sha256 to binaries on get.docker.io
 2014-03-19 17:38:07 -06:00
Sven Dowideit
43febdd432 whitespace-blind 
Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@fosiki.com> (github: SvenDowideit)
 2014-03-20 09:35:58 +10:00
Sven Dowideit
179e2c92d8 Generate md5 and sha265 hashes when building, and upload them in hack/release.sh 
Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@home.org.au> (github: SvenDowideit)
 2014-03-20 09:19:47 +10:00
Viktor Vojnovski
4fd82db4be refactor($hack,$docs): be consistent in apt-key keyserver URI usage, as done in #4740 
In #4740, the apt-key call in docs is changed to use the keyserver port 80 instead of
port 11371, as the previous call would fail with a restrictive firewall or proxy.
This commit extends the change to all apt-key calls in the repository.

Docker-DCO-1.1-Signed-off-by: Viktor Vojnovski <vojnovski@gmail.com> (github: vojnovski)
 2014-03-19 10:20:10 +01:00
Vincent Batts
c76def2dd2 typo 
Docker-DCO-1.1-Signed-off-by: Vincent Batts <vbatts@redhat.com> (github: vbatts)
 2014-03-18 13:46:38 -04:00
Vincent Batts
29c45e7f4f packagers: btrfs build tag docs 
Docker-DCO-1.1-Signed-off-by: Vincent Batts <vbatts@redhat.com> (github: vbatts)
 2014-03-18 13:45:36 -04:00
Vincent Batts
448b64164d runtime: no build tags for vfs driver 
Docker-DCO-1.1-Signed-off-by: Vincent Batts <vbatts@redhat.com> (github: vbatts)
 2014-03-17 21:54:43 -04:00
Vincent Batts
670ce98c60 graphdriver: build tags 
Enable build tags for all the graphdrivers to be excludable.

As an example:
```
$ go build
$ ls -l docker
-rwxr-xr-x 1 vbatts vbatts 18400158 Mar 14 14:22 docker*
$ go build -tags "exclude_graphdriver_aufs exclude_graphdriver_vfs exclude_graphdriver_devicemapper"
$ ls -l docker
-rwxr-xr-x 1 vbatts vbatts 17467068 Mar 14 14:22 docker*
```

Docker-DCO-1.1-Signed-off-by: Vincent Batts <vbatts@redhat.com> (github: vbatts)
 2014-03-17 21:54:05 -04:00
Victor Vieux
212a870734 Merge pull request #4646 from tianon/double-dash 
Update to double-dash everywhere
 2014-03-13 15:31:14 -07:00
Charlie Lewis
6fc83eefd9 add a breakathon for testing 
Docker-DCO-1.1-Signed-off-by: Charlie Lewis <charliel@lab41.org> (github: cglewis)
 2014-03-13 12:39:24 -07:00
Tianon Gravi
44fe8cbbd1 Update to double-dash everywhere 
These were found using `git grep -nE '[^-a-zA-Z0-9<>]-[a-zA-Z0-9]{2}'` (fair warning: _many_ false positives there).

Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-13 11:46:02 -06:00
Tianon Gravi
99b6364790 Exclude more "definitely not unit tested Go source code" directories from hack/make/test 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-12 01:18:12 -06:00
Tianon Gravi
e1c48fa560 Clean up the "go test" output from "make test" to be much more readable/scannable 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-12 01:17:38 -06:00
Tianon Gravi
7b79f597f6 Merge pull request #4521 from tianon/release-checklist-origin 
Note within the RELEASE-CHECKLIST that "origin" is assumed to be upstream
 2014-03-11 14:34:47 -06:00
Tianon Gravi
ce09171780 Merge pull request #4520 from tianon/clarify-docs-branch-update 
Clarify how to update the docs branch in the RELEASE-CHECKLIST with concrete instructions
 2014-03-10 18:47:31 -06:00
Guillaume J. Charmes
3c25302a0b
Update vendor.sh with new kr/pty revision 
Docker-DCO-1.1-Signed-off-by: Guillaume J. Charmes <guillaume@charmes.net> (github: creack)
 2014-03-10 15:34:38 -07:00
Tianon Gravi
50082f792b Fix a few packaging bugs, including and especially a temporary patch to our upstart script to mount cgroups properly 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-10 03:27:46 -06:00
Tianon Gravi
661cf32e4f Note within the RELEASE-CHECKLIST that "origin" is assumed to be upstream 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-06 23:29:08 -07:00
Tianon Gravi
0a819380c5 Clarify how to update the docs branch in the RELEASE-CHECKLIST with concrete instructions 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-06 23:16:26 -07:00
Tianon Gravi
a40bb2aabc Add new "DOCKER_CLIENTONLY" build variable to allow skipping of the dockerinit compilation, especially for Homebrew / Mac OS X client-only compilation 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-06 21:22:25 -07:00
Tianon Gravi
be344cf0d8 Fix dynbinary so that dockerinit can still be properly static even if it has to link against libapparmor for Ubuntu 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-06 19:55:22 -07:00
Tianon Gravi
0b23393ba1 Update build tags such that we can properly compile on all platforms (especially for packagers), and updated hack/PACKAGERS.md to mention the DOCKER_BUILDTAGS variable that will need to be set for binaries that might be used on AppArmor (such as Debian and especially Ubuntu) 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-06 13:39:17 -07:00
Guillaume J. Charmes
c89fa6645e
Add buildflags to allow crosscompilation for apparmor 
Docker-DCO-1.1-Signed-off-by: Guillaume J. Charmes <guillaume.charmes@docker.com> (github: creack)
 2014-03-06 12:05:03 -08:00
Andy Rothfusz
fb314c266b Merge pull request #4129 from proppy/patch-2 
hack/RELEASE: add step for updating doc branch
 2014-03-05 16:08:37 -08:00
Tianon Gravi
c41e51ce3d Add further clarification of where/when the build-time deps are applicable 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-05 08:20:42 -07:00
Tianon Gravi
5317ad476d Add "git" to our Ubuntu package "Recommends" (whoops, this should've been in here for a while now) 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-04 22:59:46 -07:00
Tianon Gravi
b69f632830 Update package deps to remove LXC and move aufs-tools to be in "Recommends" instead of strict Depends 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-04 22:52:39 -07:00
Tianon Gravi
615667b883 Rewrite more loads of PACKAGERS.md to hopefully remove some outdated information, add some updated information and pointers, and generally make the tone of this document less condescending :) 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-04 22:51:34 -07:00
Tianon Gravi
d9ec3a0347 Mention in PACKAGERS.md that Tianon is available for packager needs 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-04 21:41:59 -07:00
Tianon Gravi
9a677e6a68 Reflow PACKAGERS.md to 80 columns (where possible) and update some minor formatting 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-04 21:40:42 -07:00
Tianon Gravi
a7f265223a Update PACKAGERS.md with some text changes, including and especially moving "LXC" to a new "Optional Dependencies" section 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-03-04 21:25:00 -07:00
James Turnbull
b187d7ae41 Added documentation (and some cleanup) around small patch exemptions 
Docker-DCO-1.1-Signed-off-by: James Turnbull <james@lovedthanlost.net> (github: jamtur01)
 2014-03-02 11:43:18 -05:00
Victor Vieux
24ff3a3dc3 add --line-buffered 
Docker-DCO-1.1-Signed-off-by: Victor Vieux <victor.vieux@docker.com> (github: vieux)
 2014-02-24 21:59:01 +00:00
Tianon Gravi
41b1f93bf7 Add simple "grep" to hide the harmless "warning: no packages being tested depend on ..." in "go test -coverpkg ..." output 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-02-21 11:26:04 -07:00
Fabio Falci
b3d5e9527a Package coverage when running integration tests 
If coverpkg is missing on `go test` command, only the current package
will be covered. That's the case of unit tests. For integration tests
we need to explicitly declare each package.

Docker-DCO-1.1-Signed-off-by: Fabio Falci <fabiofalci@gmail.com> (github: fabiofalci)
 2014-02-19 16:59:51 +00:00
Tianon Gravi
277262d9c7 Merge pull request #4205 from tianon/fix-dyntest 
Fix dyntest problems finding dockerinit
 2014-02-18 11:50:16 -07:00
Tianon Gravi
6d1c0a91f8 Add "Conflicts" to our lxc-docker package to make it more clear that we can't/shouldn't be installed alongside either "docker" or "docker.io" 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-02-18 11:24:33 -07:00
Tianon Gravi
6ccb30a0e5 Fix dyntest problems finding dockerinit 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-02-18 11:23:37 -07:00
unclejack
f3ff190491 Merge pull request #4131 from tianon/vendor-golang-xattrs 
Add vendored archive/tar that includes xattrs patch
 2014-02-17 21:12:28 +02:00
Daniel Mizyrycki
b7db2d5f80 docker-ci 0.5.6: Fully dockerize docker-ci. Add build test coverage. Add backup builder. 
Docker-DCO-1.1-Signed-off-by: Daniel Mizyrycki <daniel@docker.com> (github: mzdaniel)
 2014-02-17 10:52:39 -08:00
Tianon Gravi
b762d3a739 Add vendored archive/tar that includes xattrs patch 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-02-17 08:20:21 -07:00
Johan Euphrosine
da3a52746b hack/RELEASE: add step for updating doc branch 
Docker-DCO-1.1-Signed-off-by: Johan Euphrosine <proppy@google.com> (github: google)
 2014-02-13 12:01:55 -08:00
Tianon Gravi
c7840f522c Add shasum fallback to hack/make/dynbinary for Darwin (where sha1sum is not available) 
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com> (github: tianon)
 2014-02-13 10:27:45 -07:00
Tianon Gravi
f794fbc230 Merge pull request #4043 from tianon/hack-git-detection-and-use 
Add better ".git" detection and use
 2014-02-13 09:56:14 -07:00